Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9O3bXp62g6LuJNdnGgA1VuFgtH8.roa
File: 9O3bXp62g6LuJNdnGgA1VuFgtH8.roa (raw, json)
Hash identifier: HF5lwbkvYzTgVS2/yfXoglzekFYOZNOwBeS9pwOeSaE=
Subject key identifier: F4:ED:DB:5E:9E:B6:83:A2:EE:24:D7:67:1A:00:35:56:E1:60:B4:7F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FF17A0013D38123D5CCAE8E625F40AC2C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9O3bXp62g6LuJNdnGgA1VuFgtH8.roa
Signing time: Tue 11 Aug 2026 15:38:52 +0000
ROA not before: Tue 11 Aug 2026 15:38:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 2.27.134.0/23 maxlen: 24
13.143.118.0/23 maxlen: 24
31.76.190.0/23 maxlen: 24
31.77.234.0/23 maxlen: 24
201.14.225.0/24 maxlen: 24
201.14.228.0/24 maxlen: 24
201.14.231.0/24 maxlen: 24
201.14.232.0/24 maxlen: 24
201.14.234.0/24 maxlen: 24
201.14.236.0/24 maxlen: 24
201.14.237.0/24 maxlen: 24
201.14.242.0/24 maxlen: 24
201.14.246.0/24 maxlen: 24
201.24.176.0/23 maxlen: 24
201.24.180.0/23 maxlen: 24
201.24.184.0/23 maxlen: 24
201.24.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 20:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:7a:00:13:d3:81:23:d5:cc:ae:8e:62:5f:40:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 11 15:38:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4eddb5e9eb683a2ee24d7671a003556e160b47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:61:00:5c:b3:b4:f5:88:6c:f0:aa:7b:4d:
85:de:bd:4b:32:96:4c:22:34:7c:62:1d:17:dc:00:
03:2a:1a:39:e2:b5:8a:e4:be:e4:76:a7:cb:9d:64:
1b:be:13:4a:51:99:41:0c:00:92:e9:72:3e:6f:6d:
27:d0:1c:9c:a0:cb:e3:f6:fd:51:e9:08:66:d6:e7:
48:d2:3b:bc:5b:9e:26:1c:55:04:a5:92:9d:f0:a4:
06:50:c5:05:4b:8b:10:f6:f9:9b:46:92:4e:0d:82:
29:71:57:ea:74:9d:9d:e1:36:d5:a9:b2:29:e2:1e:
11:7a:31:09:94:ab:16:9f:e8:19:eb:65:8d:d1:6e:
36:e9:be:04:fa:9f:42:e8:26:a1:16:2a:90:a0:94:
3e:d5:6f:55:0b:5b:c8:be:d9:e1:87:e3:dd:f7:4b:
df:df:3f:4d:bf:2f:c1:f1:12:80:d1:a1:83:ad:3f:
99:cf:ce:0e:41:98:aa:2f:f5:96:6d:10:08:b1:2a:
e6:a5:f1:dc:31:88:50:5b:49:e5:2e:af:67:a0:73:
85:d8:ed:de:da:5c:34:aa:0f:b2:bc:2c:29:13:fa:
51:d7:96:3f:a0:20:f8:76:60:da:96:c7:34:2c:03:
11:98:9c:42:4c:34:26:fe:ff:a9:ef:90:6a:d4:58:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:ED:DB:5E:9E:B6:83:A2:EE:24:D7:67:1A:00:35:56:E1:60:B4:7F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9O3bXp62g6LuJNdnGgA1VuFgtH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.134.0/23
13.143.118.0/23
31.76.190.0/23
31.77.234.0/23
201.14.225.0/24
201.14.228.0/24
201.14.231.0-201.14.232.255
201.14.234.0/24
201.14.236.0/23
201.14.242.0/24
201.14.246.0/24
201.24.176.0/23
201.24.180.0/23
201.24.184.0/23
201.24.188.0/23
Signature Algorithm: sha256WithRSAEncryption
56:08:c9:87:e3:3c:e9:8f:f5:81:8f:d6:f7:5c:fc:1c:cc:05:
1b:d8:1b:34:1f:68:f4:68:54:9d:7e:c7:68:f5:bb:ae:1a:f5:
53:85:c5:62:7c:93:ea:1a:f6:d9:bc:1f:46:8f:2a:d9:7a:6b:
e8:d9:40:f2:7b:3c:c7:2f:de:89:af:8a:eb:f6:e5:1e:73:0b:
cf:3b:80:34:eb:f2:5d:6b:45:b7:38:86:68:3f:e5:68:07:86:
47:72:e7:78:b1:86:fa:91:71:9d:eb:c9:a9:59:37:43:72:b2:
90:ce:1c:31:1d:14:e7:c1:c0:76:e3:b4:63:b7:86:3c:0a:c3:
78:d5:6b:c4:b8:9a:c2:1d:8d:11:10:65:16:26:04:e1:10:b9:
28:b8:64:ce:ca:6c:70:d4:36:12:64:72:a1:a2:5d:8d:cd:d9:
c2:b7:65:41:33:19:57:c8:4e:82:5e:1d:a2:54:89:a7:bb:92:
3e:06:db:ff:4f:66:bb:fc:e2:3f:5e:12:71:48:d2:0a:6c:e2:
5c:e5:90:a2:f7:12:0b:39:d9:0b:48:35:92:9e:61:d4:b2:94:
c6:50:2a:76:1e:2b:cb:78:4e:a5:1f:0b:e5:fa:74:b7:b9:fa:
2f:96:10:3f:97:0b:31:f7:75:e6:2c:99:56:d2:c3:ce:76:7f:
05:10:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 03:45:53 2026 by rpki-client